968395d88143b8042d8bf98023a13ad3_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target

968395d88143b8042d8bf98023a13ad3_JaffaCakes118
Size

369KB
MD5

968395d88143b8042d8bf98023a13ad3
SHA1

f9a4b146007b8544f25e2eda4c5ecc4860d1c3bc
SHA256

e5d57a60ca4fffdaeabf5689dc0e5cbd637b38003506664f1ea8b6b92095589f
SHA512

f284d1ad45810cc8cd96ef3fb9e4931a6aea42f8f604bd6305daea2ff42d3f250936c0ea38d78f21fa99a85d77371b3cac9fa45585caaa4966c9ea5d31516684
SSDEEP

6144:et42ojegWS937Z6nKs3Rm2uhMfbyfEr34m3vqXRDKrPpk71ZWx/01FPnJoA:IoKS9VgKsvb2EroRFKLnx01FPu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
968395d88143b8042d8bf98023a13ad3_JaffaCakes118

Files

968395d88143b8042d8bf98023a13ad3_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b5ecb120756d36ef3c049562be937e47

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconA
GetWindow
GetDlgItemInt
GetWindowTextLengthA
CascadeWindows
SetDlgItemTextA
DialogBoxParamA
GetDesktopWindow
BeginDeferWindowPos
WindowFromPoint
MessageBoxIndirectA

gdi32

DrawEscape
CreateDCA
EnumObjects
FloodFill
CopyMetaFileW
Escape
CombineTransform
EndPage
CancelDC
CopyMetaFileA
Chord
ExtFloodFill

advapi32

AdjustTokenPrivileges
NotifyChangeEventLog
RegFlushKey
RegOpenKeyA
RegDeleteValueA

kernel32

GetLastError
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
GlobalUnlock
LocalSize
GetNumberFormatA
HeapAlloc
SetLocaleInfoA
IsValidCodePage
HeapUnlock
IsBadStringPtrA
GetThreadLocale
FoldStringA
IsBadWritePtr
VirtualAllocEx
WaitForMultipleObjects
GetOverlappedResult
LCMapStringA
GetPrivateProfileStructA
GetPrivateProfileSectionNamesA
GetProfileIntA
GetProcAddress
GetHandleInformation
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
TlsGetValue
GetCPInfo
SetLastError
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW

winspool.drv

DeletePrinterConnectionA
AddFormA
GetJobA
EnumPrinterDriversA
EnumPrinterDriversW
GetPrinterA
AddPrinterConnectionA
DeletePrinterDriverExW
DeleteFormA

netapi32

NetUserAdd
NetGetJoinInformation
NetConfigGet
NetGroupAddUser
NetFileClose
NetGroupAdd
NetGetDCName
NetErrorLogRead
NetAuditWrite
NetConfigSet
NetErrorLogWrite

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.igenxr
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b5ecb120756d36ef3c049562be937e47

Headers

File Characteristics

Imports

user32

gdi32

advapi32

kernel32

winspool.drv

netapi32

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 2KB - Virtual size: 81KB

.igenxr Size: 331KB - Virtual size: 330KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 2KB - Virtual size: 81KB

.igenxr
Size: 331KB - Virtual size: 330KB

.rsrc
Size: 3KB - Virtual size: 2KB